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CLAIMS 



1 1. Method for allowing a client application (16) to establish, in a client network 

2 (10), a first connection having a first security level, directly with a first port (1) of a server 

3 application (17) hosted in a server machine (13) hnked to a server network (11), in order to 

4 send messages (30) addressed to the server machine (13), said messages (30) passing from 

5 the client network (10) to the server network (11) through a network layer (CR) of a gateway 

6 machine (9), characterized in that it comprises: 

7 - a first step that creates a second port (3) in the gateway machine (9); 

8 - a second step that orders the network layer (CR) of the gateway machine (9) to 

9 reroute to the second port (3) any message sent to the first port (1), addressed to the server 
plO machine (13); 

^11 - a third step that listens to the second port (3); 

W 12 - a fourth step that generates, in the gateway machine (9), a thread for establishing 

S| 13 said first connection when the third step detects in the second port (3) a request to establish 

^14 said first connection. 

5 1 2. Method according to claim 1, characterized in that it comprises: 

J; 2 - a fifth step that defines a third port (2) of the server application (17) for receiving at 

O 3 least one of the messages (30) with a second security level; and in that said thread comprises; 
^ 4 - a first phase that establishes said first connection with a first security level in a first 

5 interface associated with the second port (3) and with said request; 

6 - a second phase that establishes a second connection with a second level of security 

7 in a second interface to the third port (2) in the server machine (13); 

8 - a third phase that writes with the second security level in the second interface any 

9 message read in the first interface with the first security level; 

10 - a fourth phase that writes with the first security level in the first interface any 

1 1 message read in the second interface with the second security level. 

1 3. Method according to claim 2, characterized in that it comprises: 

2 - a sixth step that orders the network layer (CR) of the gateway machine (9) to delete 

3 any message sent to the third port (2). 
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1 4. Method according to claim 1 or 2, characterized in that the first and second 

2 steps are executed automatically by a first process of the gateway machine (9) and in that said 

3 first process generates a second process that executes the third and the fourth step. 

1 5. Method according to claim 4, characterized in that the first, second and sixth 

2 steps are executed automatically by a first process of the gateway machine (9) and in that said 

3 first process generates a second process that executes the third and fourth steps. 

1 6. Method for allowing a client application (16) to establish in a client network 

2 (10) a first connection having a first security level, directly with a first port (1) of a server 

3 application (17) hosted in a server machine (13) linked to a server network (1 1), in order to 
O 4 send messages (30) addressed to the server machine (13), said messages (30) passing from 
2 5 the client network ( 1 0) to the server network (11) through a network layer (CR) of a gateway 
^; 6 machine (9), characterized in that it consists of activating, in the gateway machine, a secure 
W 7 application proxy that reroutes the messages from the first connection, in a way that is 

m 8 transparent for the client application, in order to establish a second connection having a 

!^ 9 second security level with the server application, said second connection being unknown to 

^10 said client application. 
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